https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:02:01.265322+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 certfr-2022-avi-736 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… 2026-10-03T04:02:01.329098+00:00 certfr-2022-avi-736 https://cve.radiocsirt.org/vuln/euvd-2026-18732 EUVD-2026-18732 2026-10-03T04:02:01.329138+00:00 EUVD-2026-18732 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37041 fkie_cve-2022-37041 2026-10-03T04:02:01.329153+00:00

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. The value of the X-Forwarded-Host header overwrites the value of the Host header in proxied requests. The value of X-Forwarded-Host header is not checked against the whitelist of hosts that ZCS is allowed to proxy to (the zimbraProxyAllowedDomains setting).

 https://cve.radiocsirt.org/vuln/ghsa-63w7-6gxr-7jjw GHSA-63w7-6gxr-7jjw 2026-10-03T04:02:01.329184+00:00

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. The value of the X-Forwarded-Host header overwrites the value of the Host header in proxied requests. The value of X-Forwarded-Host header is not checked against the whitelist of hosts that ZCS is allowed to proxy to (the zimbraProxyAllowedDomains setting).

 https://cve.radiocsirt.org/vuln/gsd-2022-37041 gsd-2022-37041 2026-10-03T04:02:01.329201+00:00 gsd-2022-37041